This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: DvHUx7GwZFn64nfvXG5e47UuEmpbBtxeFPddJnhHaZg= Subject key identifier: 90:D6:C5:D8:DB:7B:3C:A9:B7:F1:2A:24:F4:57:F4:E9:FC:7E:68:5E Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 0198 Signing time: Thu 25 Dec 2025 02:36:46 +0000 Manifest this update: Thu 25 Dec 2025 02:36:46 +0000 Manifest next update: Thu 01 Jan 2026 02:36:46 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: K2PUe5rinbWAvvkyI9E5VNjPWA3t0nEx+ueEKlkDMe0=) 2: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: YumOlFepqCcL4/FMk4aKjlchGI7ETUe9t0yQ6qtDs+I=) 3: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: qZFxZlK/s9XuD9ZwE9EGQRrcfUALnpisB8t9uJ9BMCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 02:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: Dec 25 02:36:46 2025 GMT Not After : Jan 1 02:36:46 2026 GMT Subject: CN=694ca33e-774f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:c8:42:07:5c:c6:0d:fe:55:db:7b:3a:11: 39:5f:0d:ed:ca:08:45:b7:31:94:1c:77:a7:d1:e6: b5:aa:14:61:0c:96:f1:33:16:14:11:5e:ea:cd:dd: 1a:eb:48:52:bc:57:37:60:d2:20:ca:dd:26:99:29: e5:03:5e:e7:e5:08:ff:3a:29:ca:4b:0f:ee:2c:5d: 3d:e0:ac:78:32:25:09:3f:96:81:6e:34:73:2f:75: 42:31:d8:31:7d:b7:36:19:98:7c:47:c5:31:4a:9f: 1a:5f:f4:88:d4:b3:50:bc:d7:87:58:4a:6e:3f:bc: e2:29:49:8c:4c:cd:07:a7:ae:1b:d1:da:0e:b4:04: 6a:d4:0c:1d:c4:75:15:81:70:29:86:2c:25:43:ae: 77:c0:a2:17:dd:5a:fc:4a:49:ce:ae:5c:61:9c:26: 4c:25:5b:5a:50:9e:35:c6:27:e0:c5:d5:39:c9:7b: 4a:ce:bb:25:fa:16:ef:1f:59:d6:ee:2c:cc:e2:36: a6:e3:d3:3a:2d:9c:09:48:ad:0f:89:80:10:57:3e: ac:dd:20:14:12:d2:71:16:91:3e:75:92:c4:6d:b7: c2:27:4f:c5:35:77:c0:06:c9:9f:61:de:df:df:bc: dc:6d:ce:a6:e5:d0:c1:c7:35:0f:86:fd:bb:d9:4c: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D6:C5:D8:DB:7B:3C:A9:B7:F1:2A:24:F4:57:F4:E9:FC:7E:68:5E X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c7:d6:8b:96:93:ca:6e:6d:24:93:5e:2b:9b:3f:93:b3:97: 13:f5:b8:b8:1d:c6:3f:77:aa:3e:a2:d7:01:1e:b2:01:1f:d7: 19:69:52:3d:25:d3:4f:7f:2c:2b:ba:a6:1e:4e:e2:a2:8f:99: 55:af:77:8c:57:1a:e6:b5:58:17:e3:c0:f7:ec:74:fc:ac:3d: 83:4b:ca:b0:14:6e:19:7e:77:b9:1c:0a:9f:29:52:db:e6:b3: 21:d8:29:34:6b:fe:5a:e7:71:59:92:99:db:ff:0d:8b:c2:fa: f5:e1:57:e3:f9:ea:c1:5c:e0:2e:e4:2d:f4:ad:86:15:6f:47: 09:31:77:9e:80:32:a9:a7:e1:7f:03:ae:58:a6:01:48:29:a9: 51:b2:7b:56:6a:78:13:08:ef:d6:b2:c7:c5:f5:12:17:5a:a6: 4f:50:1f:4a:e2:bc:59:b4:f7:d2:7e:bd:69:f1:05:81:03:5f: db:6e:6a:c0:91:d3:3e:3c:d9:05:46:ad:ff:57:ba:02:70:f8: bb:1f:2f:5c:da:ac:a5:69:69:49:80:82:cc:ce:00:c7:0e:69: c7:ad:17:67:16:2b:33:f9:c7:f3:8b:79:e7:7b:8d:da:bf:86: 05:d6:97:70:06:8f:46:38:f7:af:99:13:16:84:22:ff:c0:18: aa:3b:f5:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjUxMjI1MDIzNjQ2WhcNMjYwMTAxMDIzNjQ2WjAYMRYwFAYD VQQDDA02OTRjYTMzZS03NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLjIQgdcxg3+Vdt7OhE5Xw3tyghFtzGUHHen0ea1qhRhDJbxMxYUEV7qzd0a 60hSvFc3YNIgyt0mmSnlA17n5Qj/OinKSw/uLF094Kx4MiUJP5aBbjRzL3VCMdgx fbc2GZh8R8UxSp8aX/SI1LNQvNeHWEpuP7ziKUmMTM0Hp64b0doOtARq1AwdxHUV gXAphiwlQ653wKIX3Vr8SknOrlxhnCZMJVtaUJ41xifgxdU5yXtKzrsl+hbvH1nW 7izM4jam49M6LZwJSK0PiYAQVz6s3SAUEtJxFpE+dZLEbbfCJ0/FNXfABsmfYd7f 37zcbc6m5dDBxzUPhv272UxzEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDWxdjb ezypt/EqJPRX9On8fmheMB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdx9aLlpPKbm0kk14rmz+Ts5cT9bi4HcY/d6o+otcBHrIBH9cZaVI9 JdNPfywruqYeTuKij5lVr3eMVxrmtVgX48D37HT8rD2DS8qwFG4Zfne5HAqfKVLb 5rMh2Ck0a/5a53FZkpnb/w2Lwvr14Vfj+erBXOAu5C30rYYVb0cJMXeegDKpp+F/ A65YpgFIKalRsntWangTCO/WssfF9RIXWqZPUB9K4rxZtPfSfr1p8QWBA1/bbmrA kdM+PNkFRq3/V7oCcPi7Hy9c2qylaWlJgILMzgDHDmnHrRdnFisz+cfzi3nne43a v4YF1pdwBo9GOPevmRMWhCL/wBiqO/VH -----END CERTIFICATE-----Generated at Thu Dec 25 03:53:24 2025 by rpki-client